Security Assessment & Authorization (SA&A) Analyst (Job 1453)
Summary
This on-site analyst develops and maintains Authority to Operate (ATO) security packages for federal systems, working across the Risk Management Framework (RMF) lifecycle — assessing NIST 800-53 controls, managing POA&Ms, and tracking vulnerabilities with tools like Tenable, Splunk, and GRC JCAM.
About Us
DLH delivers improved health and national security readiness solutions for federal programs through science, research and development, systems engineering and integration, and digital transformation. Our experts in public health, performance evaluation, and health operations solve the complex problems faced by civilian and military customers alike by leveraging advanced tools – including digital transformation, artificial intelligence, data analytics, cloud enablement, modeling, and simulation, and more. DLH is dedicated to the idea that “Your Mission is Our Passion” and brings a unique combination of government sector experience, proven methodology, and unwavering commitment to innovation to improve the lives of millions.
Overview
DLH is seeking a Security Assessment & Authorization Analyst to join our team. The Security Assessment & Authorization Analyst is responsible for developing and maintaining Authority to Operate (ATO) security packages and authorization documentation and working across the Risk Management Framework (RMF) lifecycle for assigned systems. You will have worked with customers to understand technologies, develop security documentation, assess vulnerabilities, document and implement security controls, manage POA&Ms, and help move solutions successfully through authorization. The ideal candidate will have experience developing ATO packages, be knowledgeable about RMF, and enjoy working across diverse teams to solve cybersecurity and compliance challenges.
Responsibilites
- Support the development and maintenance of ATO security packages and authorization documentation
- Assess security controls to ensure compliance with NIST 800-53 requirements
- Develop, manage, and update Plans of Action & Milestones (POA&Ms)
- Analyze STIG and SCAP requirements to ensure document compliance
- Track vulnerabilities through remediation, mitigation, and/or risk acceptance
- Evaluate environmental and configuration changes to determine impacts to the security posture of assigned systems
- Recommend mitigating controls and countermeasures
- Strong knowledge of security standards and best practices.
- Excellent problem-solving and analytical skills.
- Strong cross-team collaboration and coordination across diverse audiences and stakeholders
Qualifications
- Bachelor’s degree in information technology, Cybersecurity, or a related field
- Minimum of three (3) years of experience in developing and maintaining ATO security packages and helping customers with the RMF and ATO lifecycle
- Experience developing clear, concise documentation describing system configuration, operations, and security controls
- Prior experience with Cloud Security (AWS, Azure, GCP) within a large government environment (FedRAMP certified) preferred
- Prior experience with the RMF lifecycle and supporting customers to obtain Authority to Operate security packages
- Prior experience working with security tools such as Tenable, Splunk, and GRC JCAM
- Working knowledge of Federal security guidelines, standards, and control frameworks (such as NIST SP 800-53)
- Relevant certifications (e.g., CGRC (CAP), CISA, CompTIA Security+, CISSP) required.
- Must be able to obtain a Public Trust clearance
Basic Compensation: $102,000 - $115,000 yearly salary
The salary range listed reflects what we reasonably expect to pay for this role at the time of posting. The final offer may vary based on skills, experience, geographic location, market conditions, and internal equity. Additional compensation may include performance incentives and program-specific awards. We do not use salary history to determine compensation, in line with applicable law.
Benefits
DLH Corp offers our employees an excellent benefits package, including Personal Time Off (PTO), medical, dental, vision, supplemental life with AD&D, disability coverage, flexible spending accounts, and more. We want our employees to save for their future; therefore, we offer a 401(k) Retirement Plan, which includes a matching component. DLH is dedicated to your career development, providing training to help drive success, with access to our best-in-class e-learning suite for formal and informal learning, professional and technical certification preparation, and education assistance at accredited institutions.
EEO
DLH Corporation is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment. DLH will provide reasonable accommodation to individuals with disabilities and disabled Veterans who need assistance to apply.
DLH is committed to maintaining a fair and authentic interview process
Skills
As published by greenhouse · 26 questions
Basics
First Name, Last Name, Email, Phone, Resume/CV, Cover Letter
Short answers (8)
- Please provide Home Street Address
- Please provide Home City
- Please provide Home Zip Code
- Are you currently or have you within the past 2 years been employed with the federal government or military? If so, please provide current grade or transitioning rank?
- If yes, give dates and positions. optional
- If yes, give name and relationship optional
- Why are you looking for a new position at this time?
- What is your desired salary range/hourly rate?
Pick from a list (18)
- Please provide Home State
- Are you currently working under a non-compete agreement?
- Are you legally authorized to work in the United States?
- Are you at least 18 years of age or older?
- Have you ever been employed with DLH or any of its entities (Danya/IBA/Social & Scientific Systems)?
- Do you have any relatives that work for DLH or any of its subsidiaries (Danya/IBA/Social Scientific Solutions, GRSi)?
- Will you now or in future require sponsorship for employment visa status (e.g., H-1B status)?
- Some positions with DLH require government security clearances. You may be required to provide proof of U.S. citizenship. Are you able to provide proof of U.S. citizenship?
- If you provided a phone number, do you consent to receive follow-up communication via text message (or SMS message) regarding your application status?
- Are you a veteran?
- Are you a military spouse?
- This is a hybrid position which will require 3 days onsite in Bethesda, MD. Are you comfortable with a hybrid position, and a commute to Bethesda, MD?
- Do you hold a Bachelor's degree in Information Technology, Cybersecurity, or a related field?
- Do you have a minimum of 3 years of experience developing and maintaining ATO security packages and helping customers with the RMF and ATO lifecycle?
- Have you developed, managed, or updated Plans of Action & Milestones (POA&Ms)?
- Do you have experience analyzing STIG and SCAP requirements for document compliance?
- Have you evaluated environmental or configuration changes for impacts to system security posture, and recommended mitigating controls?
- Do you have prior experience working with Tenable, Splunk, and/or GRC JCAM?